From 3b90edf843bcd89fe1149802c9e959936cf1ff58 Mon Sep 17 00:00:00 2001 From: Hank Date: Wed, 3 Jun 2026 01:44:29 +0800 Subject: [PATCH] =?UTF-8?q?fix(auth):=20=E8=A3=9C=20StartSession=20middlew?= =?UTF-8?q?are=20=E7=B5=A6=20OAuth=20routes?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit api.php 的 route 預設無 session middleware， 移除 stateless() 後 session() 呼叫直接 500。 只對 /auth/google/* 兩個 route 加 StartSession，不影響其他 API endpoint。 Co-Authored-By: Claude Sonnet 4.6 --- routes/api.php | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/routes/api.php b/routes/api.php index c1e8870..82e04dc 100644 --- a/routes/api.php +++ b/routes/api.php @@ -30,9 +30,11 @@ Route::get('/diving-offers/{id}/reviews', [ReviewController::class, 'publicList Route::post('/member/register', [AuthController::class, 'registerMember']); Route::middleware('throttle:10,1')->post('/member/login', [AuthController::class, 'loginMember']); -// Google 第三方登入（僅會員） -Route::get('/auth/google/redirect', [\App\Http\Controllers\API\SocialAuthController::class, 'redirectToGoogle']); -Route::get('/auth/google/callback', [\App\Http\Controllers\API\SocialAuthController::class, 'handleGoogleCallback']); +// Google 第三方登入（僅會員）— 需要 StartSession 支援 OAuth state +Route::middleware([\Illuminate\Session\Middleware\StartSession::class])->group(function () { + Route::get('/auth/google/redirect', [\App\Http\Controllers\API\SocialAuthController::class, 'redirectToGoogle']); + Route::get('/auth/google/callback', [\App\Http\Controllers\API\SocialAuthController::class, 'handleGoogleCallback']); +}); // 會員專屬 API（需登入） Route::middleware(['auth:sanctum'])->prefix('member')->group(function () { -- 2.52.0